Which federal law primarily governs the privacy and security of electronic protected health information (ePHI) in the US?
